Re: ssh private keys on our systems

[Kevin Fenzi]

On Thu, 29 Sep 2011 15:16:03 -0400
seth vidal <skvidal(a)fedoraproject.org&gt; wrote:

>  Hi,
>   
>  I'd like to put a new policy in place which goes something like this:
>  
>  If you upload your private keys (encrypted or not) we will remove
>  them, then we will remove your public keys from FAS and force you to
>  login and give a new one in FAS.
>  
>  We do the last step on the basis that your private key, being on a
>  networked, multi-user machine is now exposed to the world and
>  potentially compromised. So we can no longer trust it.
>  
>  thoughts? 
+∞

kevin